Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: rx908kCGxNLGtjwOoTOKppXodhn4uBkgsJli217GNJE=
Subject key identifier: 1D:91:97:07:81:B7:9E:F3:12:F8:9A:2B:14:ED:AD:E1:07:AB:86:03
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 01976DABF4D2BBFB7EBB5CD00C00C8A1E668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08B1
Signing time: Sat 14 Jun 2025 09:01:15 +0000
Manifest this update: Sat 14 Jun 2025 09:01:15 +0000
Manifest next update: Sun 15 Jun 2025 09:01:15 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: RS8tjtHfVreRBHZFQhL8S1P9t1QcVwxdksfw6WRMYKw=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f4:d2:bb:fb:7e:bb:5c:d0:0c:00:c8:a1:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 14 09:01:15 2025 GMT
Not After : Jun 15 09:01:15 2025 GMT
Subject: CN=1d91970781b79ef312f89a2b14edade107ab8603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:ea:7c:b7:57:a8:b6:9b:61:6a:90:e1:2b:
31:fe:17:a8:36:9e:3b:12:2c:12:3b:67:e5:14:c2:
16:35:cb:eb:20:9d:e5:8e:57:ca:49:49:98:52:3b:
5d:0b:0d:b2:63:2d:e1:70:23:8b:12:7a:9b:d0:67:
71:29:76:59:e5:43:ca:1b:7b:28:99:66:fa:99:b2:
c4:be:fe:47:f3:44:50:bc:85:2c:35:ec:2f:d8:b5:
c5:a8:ac:40:ee:f8:8d:f7:f8:be:58:1c:4c:73:3a:
c2:0c:72:47:c8:ff:8e:82:5e:76:24:c7:ff:21:3f:
82:74:f8:0e:d0:22:8a:6c:53:4e:93:b1:a7:85:56:
5f:59:7c:3f:8b:51:9e:cf:77:f0:52:c1:83:15:8f:
de:7b:25:e6:37:66:c0:8b:bc:bc:92:6d:f3:ce:0d:
e5:c8:fe:0d:b2:cc:92:52:e4:f5:80:a5:56:2d:70:
8f:3d:43:cb:4c:01:38:bd:12:a2:ae:ed:92:4c:e5:
21:7a:31:46:03:9b:aa:70:ad:87:45:5d:12:30:d3:
5e:c9:0b:16:44:48:0b:cc:c7:c5:8f:cd:95:5b:71:
ef:a2:b9:74:e4:c8:8c:47:ff:23:de:97:6f:40:af:
66:e3:6c:e8:7a:1c:8f:69:84:a4:9f:a6:00:14:5c:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:97:07:81:B7:9E:F3:12:F8:9A:2B:14:ED:AD:E1:07:AB:86:03
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:28:cc:13:6b:8b:22:8c:c6:94:b9:b4:4c:d9:43:34:4a:e8:
9c:bb:1f:68:b0:5a:7a:f3:22:02:1d:4c:ec:ad:5d:c3:e2:dc:
56:07:d7:2d:c7:3d:a4:1b:c0:0d:d3:d9:4e:3c:a2:8e:f8:9b:
e4:7f:32:fd:fc:a7:dd:8f:16:3b:ab:1c:d0:d5:f0:03:e8:ea:
8d:51:36:eb:b0:cc:1a:11:29:2f:d8:ed:ce:3c:88:1b:d6:28:
f6:95:94:3f:25:e8:fa:30:ba:b2:44:a6:4a:dd:bb:20:bf:64:
04:5b:f3:24:34:cd:e5:af:61:2a:ec:fc:cd:51:db:23:28:38:
38:c3:e1:40:3a:7b:83:5b:4c:ff:91:42:a5:e5:c7:fb:1e:fd:
11:66:57:3c:39:ac:ed:8e:fd:39:78:df:d9:cf:23:ab:11:6d:
dd:61:f1:5c:c0:2d:0a:e6:8e:f0:b4:76:83:c3:47:9f:db:e7:
d8:66:90:18:6c:70:90:7e:66:d5:5f:cc:c8:3b:ad:f3:81:09:
92:38:1c:f3:bb:62:1d:59:7e:ea:52:a6:0a:30:23:f5:b9:23:
5a:ae:98:a6:68:73:5b:12:b6:90:6f:fd:f0:8b:ad:a5:3a:d6:
f8:3d:5c:a5:93:17:4b:6e:d4:c4:e9:5f:d5:eb:d4:3a:c0:ab:
06:69:29:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq/TSu/t+u1zQDADIoeZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjUwNjE0MDkwMTE1WhcNMjUwNjE1MDkwMTE1WjAzMTEwLwYDVQQD
EygxZDkxOTcwNzgxYjc5ZWYzMTJmODlhMmIxNGVkYWRlMTA3YWI4NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskzqfLdXqLabYWqQ4Ssx/heoNp47
EiwSO2flFMIWNcvrIJ3ljlfKSUmYUjtdCw2yYy3hcCOLEnqb0GdxKXZZ5UPKG3so
mWb6mbLEvv5H80RQvIUsNewv2LXFqKxA7viN9/i+WBxMczrCDHJHyP+Ogl52JMf/
IT+CdPgO0CKKbFNOk7GnhVZfWXw/i1Gez3fwUsGDFY/eeyXmN2bAi7y8km3zzg3l
yP4NssySUuT1gKVWLXCPPUPLTAE4vRKiru2STOUhejFGA5uqcK2HRV0SMNNeyQsW
REgLzMfFj82VW3Hvorl05MiMR/8j3pdvQK9m42zoehyPaYSkn6YAFFxBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2RlweBt57zEviaKxTtreEHq4YDMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyjME2uL
IozGlLm0TNlDNEronLsfaLBaevMiAh1M7K1dw+LcVgfXLcc9pBvADdPZTjyijvib
5H8y/fyn3Y8WO6sc0NXwA+jqjVE267DMGhEpL9jtzjyIG9Yo9pWUPyXo+jC6skSm
St27IL9kBFvzJDTN5a9hKuz8zVHbIyg4OMPhQDp7g1tM/5FCpeXH+x79EWZXPDms
7Y79OXjf2c8jqxFt3WHxXMAtCuaO8LR2g8NHn9vn2GaQGGxwkH5m1V/MyDut84EJ
kjgc87tiHVl+6lKmCjAj9bkjWq6YpmhzWxK2kG/98IutpTrW+D1cpZMXS27UxOlf
1evUOsCrBmkp9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:28:05 2025 by rpki-client